beth-copilot 1.0.18 → 2.0.0

package/dist/cli/commands/pre-push-guard.e2e.test.js

@@ -0,0 +1,171 @@
+/**
+ * E2E tests for pre-push-guard command.
+ *
+ * Runs the actual `beth-copilot pre-push-guard` binary and validates output/behavior.
+ *
+ * beth-ywg.2: pre-push-guard has 56 unit tests but zero E2E — this fills the gap.
+ *
+ * Repro steps:
+ *   1. Build: npm run build
+ *   2. Run: npx vitest run src/cli/commands/pre-push-guard.e2e.test.ts
+ *   OR: npx vitest run --config vitest.e2e.config.ts
+ *
+ * Test cases:
+ *   - Running on an epic branch → exit 0, no errors
+ *   - Running with BETH_SKIP_PUSH_GUARD=1 → exit 0, bypass
+ *   - Running on a protected branch (main) → exit 1, error message
+ *   - Running on unrecognized branch name → exit 0 with warning
+ *   - Running outside git repo → graceful handling
+ *   - Output contains expected formatting
+ *
+ * Expected outcomes documented inline per test case.
+ */
+import { describe, it, beforeEach, afterEach } from 'vitest';
+import assert from 'node:assert';
+import { execSync, spawnSync } from 'child_process';
+import { resolve, join } from 'path';
+import { mkdirSync, rmSync, existsSync, mkdtempSync } from 'fs';
+import { tmpdir } from 'os';
+const CLI_PATH = resolve(join(import.meta.dirname, '..', '..', '..', 'bin', 'cli.js'));
+/**
+ * Run pre-push-guard via the CLI binary.
+ * Accepts optional env overrides and optional stdin for git ref simulation.
+ */
+function runGuard(options = {}) {
+    const env = { ...process.env, NO_COLOR: '1', ...options.env };
+    const result = spawnSync('node', [CLI_PATH, 'pre-push-guard'], {
+        cwd: options.cwd || process.cwd(),
+        encoding: 'utf-8',
+        env,
+        input: options.stdin || '',
+        timeout: 15000,
+    });
+    return {
+        stdout: result.stdout || '',
+        stderr: result.stderr || '',
+        code: result.status ?? 1,
+    };
+}
+function createGitRepoOnBranch(branchName, prefix) {
+    const tmpDir = mkdtempSync(join(tmpdir(), prefix));
+    execSync('git init', { cwd: tmpDir, stdio: 'ignore' });
+    execSync('git config user.name "Test"', { cwd: tmpDir, stdio: 'ignore' });
+    execSync('git config user.email "test@test.com"', { cwd: tmpDir, stdio: 'ignore' });
+    execSync(`git checkout --orphan ${branchName}`, { cwd: tmpDir, stdio: 'ignore' });
+    execSync('git commit --allow-empty -m "init"', { cwd: tmpDir, stdio: 'ignore' });
+    return tmpDir;
+}
+describe('pre-push-guard command E2E', () => {
+    describe('valid epic branch repo', () => {
+        let tmpDir;
+        beforeEach(() => {
+            tmpDir = createGitRepoOnBranch('epic/beth-ywg', 'beth-guard-epic-');
+        });
+        afterEach(() => {
+            if (existsSync(tmpDir)) {
+                rmSync(tmpDir, { recursive: true, force: true });
+            }
+        });
+        // Expected: the guard should pass on a valid epic branch.
+        it('should exit 0 on the current epic branch', () => {
+            const result = runGuard({ cwd: tmpDir });
+            assert.strictEqual(result.code, 0, 'Should exit 0 on a valid epic branch');
+        });
+        it('should not produce error output on a valid branch', () => {
+            const result = runGuard({ cwd: tmpDir });
+            // Errors go to stderr — should be empty or just warnings
+            const hasBlockingError = result.stderr.includes('blocked') || result.stderr.includes('BLOCKED');
+            assert.ok(!hasBlockingError, 'Should not have blocking errors on epic branch');
+        });
+    });
+    describe('bypass with environment variable', () => {
+        // Expected: exit 0, skip all checks
+        it('should exit 0 when BETH_SKIP_PUSH_GUARD=1', () => {
+            const result = runGuard({ env: { BETH_SKIP_PUSH_GUARD: '1' } });
+            assert.strictEqual(result.code, 0, 'Should exit 0 when bypass env is set');
+        });
+        it('should indicate bypass in output', () => {
+            const result = runGuard({ env: { BETH_SKIP_PUSH_GUARD: '1' } });
+            const combined = result.stdout + result.stderr;
+            assert.ok(combined.includes('bypass') || combined.includes('skip') || combined.includes('SKIP') || result.code === 0, 'Should indicate bypass or just exit cleanly');
+        });
+    });
+    describe('outside git repo', () => {
+        let tmpDir;
+        beforeEach(() => {
+            tmpDir = mkdtempSync(join(tmpdir(), 'beth-guard-test-'));
+            mkdirSync(tmpDir, { recursive: true });
+        });
+        afterEach(() => {
+            if (existsSync(tmpDir)) {
+                rmSync(tmpDir, { recursive: true, force: true });
+            }
+        });
+        // Expected: graceful handling — no crash on missing git
+        it('should handle non-git directory gracefully', () => {
+            const result = runGuard({ cwd: tmpDir });
+            // Should not crash with unhandled exception
+            assert.ok(typeof result.code === 'number', 'Should exit with a numeric code, not crash');
+        });
+    });
+    describe('protected branch simulation', () => {
+        let tmpDir;
+        beforeEach(() => {
+            tmpDir = createGitRepoOnBranch('main', 'beth-guard-main-');
+        });
+        afterEach(() => {
+            if (existsSync(tmpDir)) {
+                rmSync(tmpDir, { recursive: true, force: true });
+            }
+        });
+        // Expected: exit 1, error about protected branch
+        it('should block push from main branch', () => {
+            const result = runGuard({ cwd: tmpDir });
+            assert.strictEqual(result.code, 1, 'Should exit 1 when on main branch');
+            const combined = result.stdout + result.stderr;
+            assert.ok(combined.includes('blocked') || combined.includes('main') || combined.includes('BLOCK'), 'Should mention main is blocked');
+        });
+        // Expected: exit 1, suggest using epic branch
+        it('should suggest using an epic branch', () => {
+            const result = runGuard({ cwd: tmpDir });
+            const combined = result.stdout + result.stderr;
+            assert.ok(combined.includes('epic') || combined.includes('PR'), 'Should suggest using an epic branch or PR');
+        });
+    });
+    describe('unrecognized branch naming', () => {
+        let tmpDir;
+        beforeEach(() => {
+            tmpDir = createGitRepoOnBranch('my-random-branch', 'beth-guard-weird-');
+        });
+        afterEach(() => {
+            if (existsSync(tmpDir)) {
+                rmSync(tmpDir, { recursive: true, force: true });
+            }
+        });
+        // Expected: exit 0 (warnings only, not blocking), with naming convention suggestion
+        it('should exit 0 but warn about non-epic branch naming', () => {
+            const result = runGuard({ cwd: tmpDir });
+            assert.strictEqual(result.code, 0, 'Should exit 0 for unrecognized but non-protected branch');
+        });
+        it('should produce a warning about naming convention', () => {
+            const result = runGuard({ cwd: tmpDir });
+            const combined = result.stdout + result.stderr;
+            assert.ok(combined.includes('convention') || combined.includes('warning') || combined.includes('Warning') || combined.includes('doesn\'t follow'), 'Should warn about naming convention');
+        });
+    });
+    describe('stdin ref parsing (simulated git push input)', () => {
+        // Git sends refs on stdin during pre-push. Test that parsing works end-to-end.
+        it('should process refs from stdin without crashing', () => {
+            const stdin = 'refs/heads/epic/beth-ywg abc123 refs/heads/epic/beth-ywg def456\n';
+            const result = runGuard({ stdin });
+            // Should not crash — the exit code depends on current branch
+            assert.ok(typeof result.code === 'number', 'Should handle stdin refs gracefully');
+        });
+        it('should block when stdin refs target main', () => {
+            const stdin = 'refs/heads/epic/beth-ywg abc123 refs/heads/main def456\n';
+            const result = runGuard({ stdin });
+            assert.strictEqual(result.code, 1, 'Should block push targeting main via stdin refs');
+        });
+    });
+});
+//# sourceMappingURL=pre-push-guard.e2e.test.js.map

package/dist/cli/commands/pre-push-guard.e2e.test.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-push-guard.e2e.test.js","sourceRoot":"","sources":["../../../src/cli/commands/pre-push-guard.e2e.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;GAqBG;AAEH,OAAO,EAAE,QAAQ,EAAE,EAAE,EAAE,UAAU,EAAE,SAAS,EAAE,MAAM,QAAQ,CAAC;AAC7D,OAAO,MAAM,MAAM,aAAa,CAAC;AACjC,OAAO,EAAE,QAAQ,EAAE,SAAS,EAAE,MAAM,eAAe,CAAC;AACpD,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,MAAM,CAAC;AACrC,OAAO,EAAE,SAAS,EAAE,MAAM,EAAE,UAAU,EAAE,WAAW,EAAE,MAAM,IAAI,CAAC;AAChE,OAAO,EAAE,MAAM,EAAE,MAAM,IAAI,CAAC;AAE5B,MAAM,QAAQ,GAAG,OAAO,CAAC,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,OAAO,EAAE,IAAI,EAAE,IAAI,EAAE,IAAI,EAAE,KAAK,EAAE,QAAQ,CAAC,CAAC,CAAC;AAEvF;;;GAGG;AACH,SAAS,QAAQ,CACf,UAII,EAAE;IAEN,MAAM,GAAG,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,QAAQ,EAAE,GAAG,EAAE,GAAG,OAAO,CAAC,GAAG,EAAE,CAAC;IAC9D,MAAM,MAAM,GAAG,SAAS,CAAC,MAAM,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE;QAC7D,GAAG,EAAE,OAAO,CAAC,GAAG,IAAI,OAAO,CAAC,GAAG,EAAE;QACjC,QAAQ,EAAE,OAAO;QACjB,GAAG;QACH,KAAK,EAAE,OAAO,CAAC,KAAK,IAAI,EAAE;QAC1B,OAAO,EAAE,KAAK;KACf,CAAC,CAAC;IACH,OAAO;QACL,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,MAAM,EAAE,MAAM,CAAC,MAAM,IAAI,EAAE;QAC3B,IAAI,EAAE,MAAM,CAAC,MAAM,IAAI,CAAC;KACzB,CAAC;AACJ,CAAC;AAED,SAAS,qBAAqB,CAAC,UAAkB,EAAE,MAAc;IAC/D,MAAM,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,MAAM,CAAC,CAAC,CAAC;IACnD,QAAQ,CAAC,UAAU,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACvD,QAAQ,CAAC,6BAA6B,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAC1E,QAAQ,CAAC,uCAAuC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACpF,QAAQ,CAAC,yBAAyB,UAAU,EAAE,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IAClF,QAAQ,CAAC,oCAAoC,EAAE,EAAE,GAAG,EAAE,MAAM,EAAE,KAAK,EAAE,QAAQ,EAAE,CAAC,CAAC;IACjF,OAAO,MAAM,CAAC;AAChB,CAAC;AAED,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;IAC1C,QAAQ,CAAC,wBAAwB,EAAE,GAAG,EAAE;QACtC,IAAI,MAAc,CAAC;QAEnB,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,GAAG,qBAAqB,CAAC,eAAe,EAAE,kBAAkB,CAAC,CAAC;QACtE,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,0DAA0D;QAC1D,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,mDAAmD,EAAE,GAAG,EAAE;YAC3D,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,yDAAyD;YACzD,MAAM,gBAAgB,GAAG,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,MAAM,CAAC,MAAM,CAAC,QAAQ,CAAC,SAAS,CAAC,CAAC;YAChG,MAAM,CAAC,EAAE,CAAC,CAAC,gBAAgB,EAAE,gDAAgD,CAAC,CAAC;QACjF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kCAAkC,EAAE,GAAG,EAAE;QAChD,oCAAoC;QACpC,EAAE,CAAC,2CAA2C,EAAE,GAAG,EAAE;YACnD,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAChE,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,sCAAsC,CAAC,CAAC;QAC7E,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kCAAkC,EAAE,GAAG,EAAE;YAC1C,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,EAAE,oBAAoB,EAAE,GAAG,EAAE,EAAE,CAAC,CAAC;YAChE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/C,MAAM,CAAC,EAAE,CACP,QAAQ,CAAC,QAAQ,CAAC,QAAQ,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,MAAM,CAAC,IAAI,KAAK,CAAC,EAC1G,6CAA6C,CAC9C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,kBAAkB,EAAE,GAAG,EAAE;QAChC,IAAI,MAAc,CAAC;QAEnB,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,GAAG,WAAW,CAAC,IAAI,CAAC,MAAM,EAAE,EAAE,kBAAkB,CAAC,CAAC,CAAC;YACzD,SAAS,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,CAAC,CAAC;QACzC,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,wDAAwD;QACxD,EAAE,CAAC,4CAA4C,EAAE,GAAG,EAAE;YACpD,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,4CAA4C;YAC5C,MAAM,CAAC,EAAE,CACP,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAC/B,4CAA4C,CAC7C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,6BAA6B,EAAE,GAAG,EAAE;QAC3C,IAAI,MAAc,CAAC;QAEnB,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,GAAG,qBAAqB,CAAC,MAAM,EAAE,kBAAkB,CAAC,CAAC;QAC7D,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,iDAAiD;QACjD,EAAE,CAAC,oCAAoC,EAAE,GAAG,EAAE;YAC5C,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,mCAAmC,CAAC,CAAC;YACxE,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/C,MAAM,CAAC,EAAE,CACP,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,OAAO,CAAC,EACvF,gCAAgC,CACjC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,8CAA8C;QAC9C,EAAE,CAAC,qCAAqC,EAAE,GAAG,EAAE;YAC7C,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/C,MAAM,CAAC,EAAE,CACP,QAAQ,CAAC,QAAQ,CAAC,MAAM,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,IAAI,CAAC,EACpD,2CAA2C,CAC5C,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,4BAA4B,EAAE,GAAG,EAAE;QAC1C,IAAI,MAAc,CAAC;QAEnB,UAAU,CAAC,GAAG,EAAE;YACd,MAAM,GAAG,qBAAqB,CAAC,kBAAkB,EAAE,mBAAmB,CAAC,CAAC;QAC1E,CAAC,CAAC,CAAC;QAEH,SAAS,CAAC,GAAG,EAAE;YACb,IAAI,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;gBACvB,MAAM,CAAC,MAAM,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,KAAK,EAAE,IAAI,EAAE,CAAC,CAAC;YACnD,CAAC;QACH,CAAC,CAAC,CAAC;QAEH,oFAAoF;QACpF,EAAE,CAAC,qDAAqD,EAAE,GAAG,EAAE;YAC7D,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,yDAAyD,CAAC,CAAC;QAChG,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,kDAAkD,EAAE,GAAG,EAAE;YAC1D,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,GAAG,EAAE,MAAM,EAAE,CAAC,CAAC;YACzC,MAAM,QAAQ,GAAG,MAAM,CAAC,MAAM,GAAG,MAAM,CAAC,MAAM,CAAC;YAC/C,MAAM,CAAC,EAAE,CACP,QAAQ,CAAC,QAAQ,CAAC,YAAY,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,SAAS,CAAC,IAAI,QAAQ,CAAC,QAAQ,CAAC,iBAAiB,CAAC,EACvI,qCAAqC,CACtC,CAAC;QACJ,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;IAEH,QAAQ,CAAC,8CAA8C,EAAE,GAAG,EAAE;QAC5D,+EAA+E;QAC/E,EAAE,CAAC,iDAAiD,EAAE,GAAG,EAAE;YACzD,MAAM,KAAK,GAAG,mEAAmE,CAAC;YAClF,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,6DAA6D;YAC7D,MAAM,CAAC,EAAE,CACP,OAAO,MAAM,CAAC,IAAI,KAAK,QAAQ,EAC/B,qCAAqC,CACtC,CAAC;QACJ,CAAC,CAAC,CAAC;QAEH,EAAE,CAAC,0CAA0C,EAAE,GAAG,EAAE;YAClD,MAAM,KAAK,GAAG,0DAA0D,CAAC;YACzE,MAAM,MAAM,GAAG,QAAQ,CAAC,EAAE,KAAK,EAAE,CAAC,CAAC;YACnC,MAAM,CAAC,WAAW,CAAC,MAAM,CAAC,IAAI,EAAE,CAAC,EAAE,iDAAiD,CAAC,CAAC;QACxF,CAAC,CAAC,CAAC;IACL,CAAC,CAAC,CAAC;AACL,CAAC,CAAC,CAAC"}

package/dist/cli/commands/pre-push-guard.js

@@ -0,0 +1,212 @@
+/**
+ * Pre-Push Guard — Branch discipline enforcement
+ *
+ * Validates before push:
+ * - No direct pushes to main/master (BLOCKS)
+ * - Current branch follows epic/<id> convention (WARNING)
+ * - Bypassed with BETH_SKIP_PUSH_GUARD=1 environment variable
+ */
+import { execFileSync } from 'child_process';
+const COLORS = {
+    reset: '\x1b[0m',
+    bright: '\x1b[1m',
+    red: '\x1b[31m',
+    yellow: '\x1b[33m',
+    cyan: '\x1b[36m',
+};
+/** Protected branch names that cannot receive direct pushes. */
+const PROTECTED_BRANCHES = ['main', 'master'];
+/** Epic branch naming convention: epic/<rig>-<hash> */
+const EPIC_BRANCH_PATTERN = /^epic\/[a-z]+-[a-z0-9]+$/;
+/** Release branches are also valid push targets. */
+const RELEASE_BRANCH_PATTERN = /^release\/v?\d+/;
+/**
+ * Parse pre-push stdin input into structured refs.
+ * Git sends: <local ref> <local SHA> <remote ref> <remote SHA>
+ * One line per ref being pushed.
+ */
+export function parsePushRefs(stdin) {
+    return stdin
+        .trim()
+        .split('\n')
+        .filter((line) => line.trim().length > 0)
+        .map((line) => {
+        const parts = line.trim().split(/\s+/);
+        return {
+            localRef: parts[0] || '',
+            localSha: parts[1] || '',
+            remoteRef: parts[2] || '',
+            remoteSha: parts[3] || '',
+        };
+    });
+}
+/**
+ * Extract branch name from a Git ref.
+ * refs/heads/main → main
+ * refs/heads/epic/beth-abc123 → epic/beth-abc123
+ */
+export function extractBranchName(ref) {
+    const prefix = 'refs/heads/';
+    if (ref.startsWith(prefix)) {
+        return ref.slice(prefix.length);
+    }
+    return ref;
+}
+/**
+ * Check if a branch name is protected (main, master).
+ */
+export function isProtectedBranch(branch) {
+    return PROTECTED_BRANCHES.includes(branch);
+}
+/**
+ * Check if the branch follows the epic/<id> convention.
+ */
+export function isEpicBranch(branch) {
+    return EPIC_BRANCH_PATTERN.test(branch);
+}
+/**
+ * Check if the branch is a release branch.
+ */
+export function isReleaseBranch(branch) {
+    return RELEASE_BRANCH_PATTERN.test(branch);
+}
+/**
+ * Check if the branch follows any recognized naming convention.
+ */
+export function isRecognizedBranch(branch) {
+    return isEpicBranch(branch) || isReleaseBranch(branch) || isProtectedBranch(branch);
+}
+/**
+ * Get the current Git branch name.
+ * Returns null if not in a git repo or in detached HEAD state.
+ */
+export function getCurrentBranch() {
+    try {
+        const result = execFileSync('git', ['branch', '--show-current'], {
+            encoding: 'utf-8',
+            timeout: 5000,
+            stdio: ['pipe', 'pipe', 'pipe'],
+        }).trim();
+        return result || null;
+    }
+    catch {
+        return null;
+    }
+}
+/**
+ * Run all pre-push guard checks.
+ *
+ * @param currentBranch - Current Git branch name
+ * @param refs - Optional parsed push refs from Git stdin (for remote ref validation)
+ * @returns GuardResult with allowed status and diagnostics
+ */
+export function runGuard(currentBranch, refs) {
+    const errors = [];
+    const warnings = [];
+    // Check 1: No pushing to protected branches via remote refs
+    if (refs && refs.length > 0) {
+        for (const ref of refs) {
+            const targetBranch = extractBranchName(ref.remoteRef);
+            if (isProtectedBranch(targetBranch)) {
+                errors.push(`Direct push to '${targetBranch}' is blocked. Use a PR from your epic branch.`);
+            }
+        }
+    }
+    // Check 1b: Also block if current branch IS a protected branch
+    // (catches the common case without needing stdin refs)
+    if (currentBranch && isProtectedBranch(currentBranch)) {
+        const msg = `Pushing from '${currentBranch}' is blocked. Work on an epic branch.`;
+        if (!errors.some((e) => e.includes(currentBranch))) {
+            errors.push(msg);
+        }
+    }
+    // Check 2: Current branch should follow epic convention
+    if (currentBranch && !isRecognizedBranch(currentBranch)) {
+        warnings.push(`Branch '${currentBranch}' doesn't follow the epic/<id> convention. Consider renaming.`);
+    }
+    return {
+        allowed: errors.length === 0,
+        errors,
+        warnings,
+    };
+}
+/**
+ * Main entry point for the pre-push guard command.
+ * Reads refs from stdin (if available) and runs all checks.
+ */
+export async function prePushGuard(stdinInput) {
+    // Check bypass
+    if (process.env.BETH_SKIP_PUSH_GUARD === '1') {
+        console.error(`${COLORS.yellow}⚠ Pre-push guard bypassed (BETH_SKIP_PUSH_GUARD=1)${COLORS.reset}`);
+        return;
+    }
+    // Read stdin if not provided (Git pre-push pipes refs via stdin)
+    let stdin = stdinInput;
+    if (stdin === undefined) {
+        const fs = await import('fs');
+        try {
+            stdin = fs.readFileSync(0, 'utf-8');
+        }
+        catch {
+            stdin = '';
+        }
+    }
+    const refs = stdin.trim() ? parsePushRefs(stdin) : undefined;
+    const currentBranch = getCurrentBranch();
+    const result = runGuard(currentBranch, refs);
+    // Print warnings
+    for (const warning of result.warnings) {
+        console.error(`${COLORS.yellow}⚠ ${warning}${COLORS.reset}`);
+    }
+    // Print errors and exit non-zero to block push
+    if (!result.allowed) {
+        console.error('');
+        for (const error of result.errors) {
+            console.error(`${COLORS.red}✗ ${error}${COLORS.reset}`);
+        }
+        console.error(`\n${COLORS.yellow}Set BETH_SKIP_PUSH_GUARD=1 to bypass.${COLORS.reset}`);
+        process.exit(1);
+    }
+}
+/**
+ * Generate the shell script content for the pre-push hook.
+ * Pure shell — no Node dependency at hook time for speed.
+ */
+export function generateHookScript() {
+    return `
+# --- BEGIN BETH GUARD ---
+# Branch discipline enforcement — installed by beth-copilot
+# Bypass: BETH_SKIP_PUSH_GUARD=1 git push
+if [ "\$BETH_SKIP_PUSH_GUARD" = "1" ]; then
+  echo "⚠ Pre-push guard bypassed (BETH_SKIP_PUSH_GUARD=1)" >&2
+else
+  _beth_branch=\$(git branch --show-current 2>/dev/null)
+
+  # Block pushes from protected branches
+  case "\$_beth_branch" in
+    main|master)
+      echo "✗ Pushing from '\$_beth_branch' is blocked. Work on an epic branch." >&2
+      echo "  Set BETH_SKIP_PUSH_GUARD=1 to bypass." >&2
+      exit 1
+      ;;
+  esac
+
+  # Warn if not on an epic or release branch
+  case "\$_beth_branch" in
+    epic/*) ;;
+    release/*) ;;
+    "")
+      echo "⚠ Detached HEAD — no branch name. Proceeding anyway." >&2
+      ;;
+    *)
+      echo "⚠ Branch '\$_beth_branch' doesn't follow the epic/<id> convention." >&2
+      ;;
+  esac
+fi
+# --- END BETH GUARD ---
+`;
+}
+/** Marker used to detect if bethguard is already installed in a hook file. */
+export const BETH_GUARD_BEGIN = '# --- BEGIN BETH GUARD ---';
+export const BETH_GUARD_END = '# --- END BETH GUARD ---';
+//# sourceMappingURL=pre-push-guard.js.map

package/dist/cli/commands/pre-push-guard.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-push-guard.js","sourceRoot":"","sources":["../../../src/cli/commands/pre-push-guard.ts"],"names":[],"mappings":"AAAA;;;;;;;GAOG;AAEH,OAAO,EAAE,YAAY,EAAE,MAAM,eAAe,CAAC;AAE7C,MAAM,MAAM,GAAG;IACb,KAAK,EAAE,SAAS;IAChB,MAAM,EAAE,SAAS;IACjB,GAAG,EAAE,UAAU;IACf,MAAM,EAAE,UAAU;IAClB,IAAI,EAAE,UAAU;CACjB,CAAC;AAEF,gEAAgE;AAChE,MAAM,kBAAkB,GAAG,CAAC,MAAM,EAAE,QAAQ,CAAC,CAAC;AAE9C,uDAAuD;AACvD,MAAM,mBAAmB,GAAG,0BAA0B,CAAC;AAEvD,oDAAoD;AACpD,MAAM,sBAAsB,GAAG,iBAAiB,CAAC;AAejD;;;;GAIG;AACH,MAAM,UAAU,aAAa,CAAC,KAAa;IACzC,OAAO,KAAK;SACT,IAAI,EAAE;SACN,KAAK,CAAC,IAAI,CAAC;SACX,MAAM,CAAC,CAAC,IAAI,EAAE,EAAE,CAAC,IAAI,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC,CAAC;SACxC,GAAG,CAAC,CAAC,IAAI,EAAE,EAAE;QACZ,MAAM,KAAK,GAAG,IAAI,CAAC,IAAI,EAAE,CAAC,KAAK,CAAC,KAAK,CAAC,CAAC;QACvC,OAAO;YACL,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACxB,QAAQ,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACxB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;YACzB,SAAS,EAAE,KAAK,CAAC,CAAC,CAAC,IAAI,EAAE;SAC1B,CAAC;IACJ,CAAC,CAAC,CAAC;AACP,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,iBAAiB,CAAC,GAAW;IAC3C,MAAM,MAAM,GAAG,aAAa,CAAC;IAC7B,IAAI,GAAG,CAAC,UAAU,CAAC,MAAM,CAAC,EAAE,CAAC;QAC3B,OAAO,GAAG,CAAC,KAAK,CAAC,MAAM,CAAC,MAAM,CAAC,CAAC;IAClC,CAAC;IACD,OAAO,GAAG,CAAC;AACb,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,iBAAiB,CAAC,MAAc;IAC9C,OAAO,kBAAkB,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,YAAY,CAAC,MAAc;IACzC,OAAO,mBAAmB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC1C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,eAAe,CAAC,MAAc;IAC5C,OAAO,sBAAsB,CAAC,IAAI,CAAC,MAAM,CAAC,CAAC;AAC7C,CAAC;AAED;;GAEG;AACH,MAAM,UAAU,kBAAkB,CAAC,MAAc;IAC/C,OAAO,YAAY,CAAC,MAAM,CAAC,IAAI,eAAe,CAAC,MAAM,CAAC,IAAI,iBAAiB,CAAC,MAAM,CAAC,CAAC;AACtF,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,gBAAgB;IAC9B,IAAI,CAAC;QACH,MAAM,MAAM,GAAG,YAAY,CAAC,KAAK,EAAE,CAAC,QAAQ,EAAE,gBAAgB,CAAC,EAAE;YAC/D,QAAQ,EAAE,OAAO;YACjB,OAAO,EAAE,IAAI;YACb,KAAK,EAAE,CAAC,MAAM,EAAE,MAAM,EAAE,MAAM,CAAC;SAChC,CAAC,CAAC,IAAI,EAAE,CAAC;QACV,OAAO,MAAM,IAAI,IAAI,CAAC;IACxB,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,IAAI,CAAC;IACd,CAAC;AACH,CAAC;AAED;;;;;;GAMG;AACH,MAAM,UAAU,QAAQ,CACtB,aAA4B,EAC5B,IAAgB;IAEhB,MAAM,MAAM,GAAa,EAAE,CAAC;IAC5B,MAAM,QAAQ,GAAa,EAAE,CAAC;IAE9B,4DAA4D;IAC5D,IAAI,IAAI,IAAI,IAAI,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;QAC5B,KAAK,MAAM,GAAG,IAAI,IAAI,EAAE,CAAC;YACvB,MAAM,YAAY,GAAG,iBAAiB,CAAC,GAAG,CAAC,SAAS,CAAC,CAAC;YACtD,IAAI,iBAAiB,CAAC,YAAY,CAAC,EAAE,CAAC;gBACpC,MAAM,CAAC,IAAI,CACT,mBAAmB,YAAY,+CAA+C,CAC/E,CAAC;YACJ,CAAC;QACH,CAAC;IACH,CAAC;IAED,+DAA+D;IAC/D,uDAAuD;IACvD,IAAI,aAAa,IAAI,iBAAiB,CAAC,aAAa,CAAC,EAAE,CAAC;QACtD,MAAM,GAAG,GAAG,iBAAiB,aAAa,uCAAuC,CAAC;QAClF,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,QAAQ,CAAC,aAAa,CAAC,CAAC,EAAE,CAAC;YACnD,MAAM,CAAC,IAAI,CAAC,GAAG,CAAC,CAAC;QACnB,CAAC;IACH,CAAC;IAED,wDAAwD;IACxD,IAAI,aAAa,IAAI,CAAC,kBAAkB,CAAC,aAAa,CAAC,EAAE,CAAC;QACxD,QAAQ,CAAC,IAAI,CACX,WAAW,aAAa,+DAA+D,CACxF,CAAC;IACJ,CAAC;IAED,OAAO;QACL,OAAO,EAAE,MAAM,CAAC,MAAM,KAAK,CAAC;QAC5B,MAAM;QACN,QAAQ;KACT,CAAC;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,YAAY,CAAC,UAAmB;IACpD,eAAe;IACf,IAAI,OAAO,CAAC,GAAG,CAAC,oBAAoB,KAAK,GAAG,EAAE,CAAC;QAC7C,OAAO,CAAC,KAAK,CACX,GAAG,MAAM,CAAC,MAAM,qDAAqD,MAAM,CAAC,KAAK,EAAE,CACpF,CAAC;QACF,OAAO;IACT,CAAC;IAED,iEAAiE;IACjE,IAAI,KAAK,GAAG,UAAU,CAAC;IACvB,IAAI,KAAK,KAAK,SAAS,EAAE,CAAC;QACxB,MAAM,EAAE,GAAG,MAAM,MAAM,CAAC,IAAI,CAAC,CAAC;QAC9B,IAAI,CAAC;YACH,KAAK,GAAG,EAAE,CAAC,YAAY,CAAC,CAAC,EAAE,OAAO,CAAC,CAAC;QACtC,CAAC;QAAC,MAAM,CAAC;YACP,KAAK,GAAG,EAAE,CAAC;QACb,CAAC;IACH,CAAC;IAED,MAAM,IAAI,GAAG,KAAK,CAAC,IAAI,EAAE,CAAC,CAAC,CAAC,aAAa,CAAC,KAAK,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC;IAC7D,MAAM,aAAa,GAAG,gBAAgB,EAAE,CAAC;IACzC,MAAM,MAAM,GAAG,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,CAAC;IAE7C,iBAAiB;IACjB,KAAK,MAAM,OAAO,IAAI,MAAM,CAAC,QAAQ,EAAE,CAAC;QACtC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,MAAM,KAAK,OAAO,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;IAC/D,CAAC;IAED,+CAA+C;IAC/C,IAAI,CAAC,MAAM,CAAC,OAAO,EAAE,CAAC;QACpB,OAAO,CAAC,KAAK,CAAC,EAAE,CAAC,CAAC;QAClB,KAAK,MAAM,KAAK,IAAI,MAAM,CAAC,MAAM,EAAE,CAAC;YAClC,OAAO,CAAC,KAAK,CAAC,GAAG,MAAM,CAAC,GAAG,KAAK,KAAK,GAAG,MAAM,CAAC,KAAK,EAAE,CAAC,CAAC;QAC1D,CAAC;QACD,OAAO,CAAC,KAAK,CACX,KAAK,MAAM,CAAC,MAAM,wCAAwC,MAAM,CAAC,KAAK,EAAE,CACzE,CAAC;QACF,OAAO,CAAC,IAAI,CAAC,CAAC,CAAC,CAAC;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;CA+BR,CAAC;AACF,CAAC;AAED,8EAA8E;AAC9E,MAAM,CAAC,MAAM,gBAAgB,GAAG,4BAA4B,CAAC;AAC7D,MAAM,CAAC,MAAM,cAAc,GAAG,0BAA0B,CAAC"}

package/dist/cli/commands/pre-push-guard.test.d.ts

@@ -0,0 +1,14 @@
+/**
+ * Pre-Push Guard Tests
+ *
+ * Tests branch discipline enforcement:
+ * - Push ref parsing from Git stdin
+ * - Branch name extraction from refs
+ * - Protected branch detection
+ * - Epic branch convention validation
+ * - Release branch recognition
+ * - Guard logic: errors vs warnings
+ * - Hook script generation
+ */
+export {};
+//# sourceMappingURL=pre-push-guard.test.d.ts.map

package/dist/cli/commands/pre-push-guard.test.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"pre-push-guard.test.d.ts","sourceRoot":"","sources":["../../../src/cli/commands/pre-push-guard.test.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;GAWG"}